Changes

'''Server side'''

'''Server side'''

[[File:Networking rutxxx configuration openvpn server v1.png|alt=|border|class=tlt-border]]

[[File:Networking rutxxx configuration openvpn server v1.png|alt=|border|class=tlt-border|1100px]]

'''Client side'''

'''Client side'''

[[File:Networking rut configuration openvpn client v1.png|alt=|border|class=tlt-border]]

[[File:Networking rut configuration openvpn client v1.png|alt=|border|class=tlt-border|1100px]]

Another method of testing pinging the other instance's virtual or private IP address. You can send ping packets via CLI, SSH, or from the '''[[RUT955_Administration#Diagnostics|System → Administration → Troubleshoot → Diagnostics]]''' section of the router's WebUI:

Another method of testing pinging the other instance's virtual or private IP address. You can send ping packets via CLI, SSH, or from the '''[[RUT955_Administration#Diagnostics|System → Administration → Troubleshoot → Diagnostics]]''' section of the router's WebUI:

[[File:Networking rut configuration diagnostics ping v1.jpg|alt=|border|class=tlt-border]]

[[File:Networking rut configuration diagnostics ping v1.jpg|alt=|border|class=tlt-border|1100px]]

Ping the Server's virtual/private IP address from the Client or vice versa. If the ping packets are transmitted successfully, congratulations, your OpenVPN connection is working.

Ping the Server's virtual/private IP address from the Client or vice versa. If the ping packets are transmitted successfully, congratulations, your OpenVPN connection is working.

Once you know the Common Names and LAN IP Addresses of your OpenVPN Clients, you can create TLS Clients instances for each of them:

Once you know the Common Names and LAN IP Addresses of your OpenVPN Clients, you can create TLS Clients instances for each of them:

[[File:Networking rut configuration openvpn tls clients v1.jpg|alt=|border|class=tlt-border]]

[[File:Networking rut configuration openvpn tls clients v1.jpg|alt=|border|class=tlt-border|1100px]]

In addition, with TLS Clients you can manually assign Virtual local and remote endpoint addresses for the Clients. But these fields are not mandatory and the addresses will be assigned automatically if they are left unchecked.

In addition, with TLS Clients you can manually assign Virtual local and remote endpoint addresses for the Clients. But these fields are not mandatory and the addresses will be assigned automatically if they are left unchecked.

Next, go to the '''Network → Firewall → Zone Forwarding section. Click the '''Edit''' button located next to the '''vpn''' rule and in the subsequent window add a checkmark next to '''wan''' as such:'''

Next, go to the '''Network → Firewall → Zone Forwarding section. Click the '''Edit''' button located next to the '''vpn''' rule and in the subsequent window add a checkmark next to '''wan''' as such:'''

[[File:Networking rut configuration openvpn firewall v1.jpg|alt=|border|class=tlt-border]]

[[File:Networking rut configuration openvpn firewall v1.jpg|alt=|border|class=tlt-border|1100px]]

his will redirect all WAN traffic through the OpenVPN tunnel.

his will redirect all WAN traffic through the OpenVPN tunnel.